aws-sdk-lambda 1.126.0 → 1.127.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a54010ae94a05040581a1afef5539329feb0d58a19fcd6093c38eeaed083043e
-  data.tar.gz: cf5c143be4454d9bc642bf5c377e1fbc6a7ec814346dc2c79f39a9ed197504d6
+  metadata.gz: 275f1ef6c8d9f4e06be88fb52926b5aa8b24edabfefb35cb7981eaa5b587c1d2
+  data.tar.gz: 06a6aaef69c392106354e7b8afd6715c49abcca48ccdd21e67232da5dc2245ad
 SHA512:
-  metadata.gz: f3eb80ef02225c35ce8fffb3bceac8d2b9c9954c31c0227d0a117186f817c304028f1d4c692b8b0b9d139d13f446fe8255098880a2ac2770017e87732899aafb
-  data.tar.gz: 42f64221e04f2e6f0ef8afb7df2d0e2cedcf3b0cd05f7eac15905a8091322a2068b760feb0d8a94b05efd791dfa6df971278da51745af1e58c8c9d5dfd4fbe82
+  metadata.gz: a1052b31f40d459ae4a9a93a97b451663e7c91d94cda950c2cadb1e2c632f92484fc84ab539700a94f40104e26dba21672e47e49a133de0f2e674822a1148f02
+  data.tar.gz: 4e46210809f415c05108bdc475960d61457610d66e3ca883bb296f00c609d1ddef513bda99f74fdfcceb9a9d0cba6aa9e5e766cc5b3c468432ce89fa34acc054

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.127.0 (2024-08-21)
+------------------
+
+* Feature - Release FilterCriteria encryption for Lambda EventSourceMapping,  enabling customers to encrypt their filter criteria using a customer-owned KMS key.
+
 1.126.0 (2024-08-19)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.126.0
+1.127.0

data/lib/aws-sdk-lambda/client.rb

@@ -509,24 +509,24 @@ module Aws::Lambda
       req.send_request(options)
     end
 
-    # Grants an Amazon Web Service, Amazon Web Services account, or Amazon
-    # Web Services organization permission to use a function. You can apply
-    # the policy at the function level, or specify a qualifier to restrict
-    # access to a single version or alias. If you use a qualifier, the
-    # invoker must use the full Amazon Resource Name (ARN) of that version
-    # or alias to invoke the function. Note: Lambda does not support adding
-    # policies to version $LATEST.
+    # Grants an Amazon Web Servicesservice, Amazon Web Services account, or
+    # Amazon Web Services organization permission to use a function. You can
+    # apply the policy at the function level, or specify a qualifier to
+    # restrict access to a single version or alias. If you use a qualifier,
+    # the invoker must use the full Amazon Resource Name (ARN) of that
+    # version or alias to invoke the function. Note: Lambda does not support
+    # adding policies to version $LATEST.
     #
     # To grant permission to another account, specify the account ID as the
     # `Principal`. To grant permission to an organization defined in
     # Organizations, specify the organization ID as the `PrincipalOrgID`.
-    # For Amazon Web Services, the principal is a domain-style identifier
-    # that the service defines, such as `s3.amazonaws.com` or
-    # `sns.amazonaws.com`. For Amazon Web Services, you can also specify the
-    # ARN of the associated resource as the `SourceArn`. If you grant
-    # permission to a service principal without specifying the source, other
-    # accounts could potentially configure resources in their account to
-    # invoke your Lambda function.
+    # For Amazon Web Servicesservices, the principal is a domain-style
+    # identifier that the service defines, such as `s3.amazonaws.com` or
+    # `sns.amazonaws.com`. For Amazon Web Servicesservices, you can also
+    # specify the ARN of the associated resource as the `SourceArn`. If you
+    # grant permission to a service principal without specifying the source,
+    # other accounts could potentially configure resources in their account
+    # to invoke your Lambda function.
     #
     # This operation adds a statement to a resource-based permissions policy
     # for the function. For more information about function policies, see
@@ -562,23 +562,25 @@ module Aws::Lambda
     #   `lambda:InvokeFunction` or `lambda:GetFunction`.
     #
     # @option params [required, String] :principal
-    #   The Amazon Web Service or Amazon Web Services account that invokes the
-    #   function. If you specify a service, use `SourceArn` or `SourceAccount`
-    #   to limit who can invoke the function through that service.
+    #   The Amazon Web Servicesservice or Amazon Web Services account that
+    #   invokes the function. If you specify a service, use `SourceArn` or
+    #   `SourceAccount` to limit who can invoke the function through that
+    #   service.
     #
     # @option params [String] :source_arn
-    #   For Amazon Web Services, the ARN of the Amazon Web Services resource
-    #   that invokes the function. For example, an Amazon S3 bucket or Amazon
-    #   SNS topic.
+    #   For Amazon Web Servicesservices, the ARN of the Amazon Web Services
+    #   resource that invokes the function. For example, an Amazon S3 bucket
+    #   or Amazon SNS topic.
     #
     #   Note that Lambda configures the comparison using the `StringLike`
     #   operator.
     #
     # @option params [String] :source_account
-    #   For Amazon Web Service, the ID of the Amazon Web Services account that
-    #   owns the resource. Use this together with `SourceArn` to ensure that
-    #   the specified account owns the resource. It is possible for an Amazon
-    #   S3 bucket to be deleted by its owner and recreated by another account.
+    #   For Amazon Web Servicesservice, the ID of the Amazon Web Services
+    #   account that owns the resource. Use this together with `SourceArn` to
+    #   ensure that the specified account owns the resource. It is possible
+    #   for an Amazon S3 bucket to be deleted by its owner and recreated by
+    #   another account.
     #
     # @option params [String] :event_source_token
     #   For Alexa Smart Home functions, a token that the invoker must supply.
@@ -1025,6 +1027,16 @@ module Aws::Lambda
     # @option params [Types::DocumentDBEventSourceConfig] :document_db_event_source_config
     #   Specific configuration settings for a DocumentDB event source.
     #
+    # @option params [String] :kms_key_arn
+    #   The ARN of the Key Management Service (KMS) customer managed key that
+    #   Lambda uses to encrypt your function's [filter criteria][1]. By
+    #   default, Lambda does not encrypt your filter criteria object. Specify
+    #   this property to encrypt data using your own customer managed key.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics
+    #
     # @return [Types::EventSourceMappingConfiguration] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::EventSourceMappingConfiguration#uuid #uuid} => String
@@ -1054,6 +1066,8 @@ module Aws::Lambda
     #   * {Types::EventSourceMappingConfiguration#self_managed_kafka_event_source_config #self_managed_kafka_event_source_config} => Types::SelfManagedKafkaEventSourceConfig
     #   * {Types::EventSourceMappingConfiguration#scaling_config #scaling_config} => Types::ScalingConfig
     #   * {Types::EventSourceMappingConfiguration#document_db_event_source_config #document_db_event_source_config} => Types::DocumentDBEventSourceConfig
+    #   * {Types::EventSourceMappingConfiguration#kms_key_arn #kms_key_arn} => String
+    #   * {Types::EventSourceMappingConfiguration#filter_criteria_error #filter_criteria_error} => Types::FilterCriteriaError
     #
     # @example Request syntax with placeholder values
     #
@@ -1113,6 +1127,7 @@ module Aws::Lambda
     #       collection_name: "CollectionName",
     #       full_document: "UpdateLookup", # accepts UpdateLookup, Default
     #     },
+    #     kms_key_arn: "KMSKeyArn",
     #   })
     #
     # @example Response structure
@@ -1155,6 +1170,9 @@ module Aws::Lambda
     #   resp.document_db_event_source_config.database_name #=> String
     #   resp.document_db_event_source_config.collection_name #=> String
     #   resp.document_db_event_source_config.full_document #=> String, one of "UpdateLookup", "Default"
+    #   resp.kms_key_arn #=> String
+    #   resp.filter_criteria_error.error_code #=> String
+    #   resp.filter_criteria_error.message #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/CreateEventSourceMapping AWS API Documentation
     #
@@ -1169,8 +1187,8 @@ module Aws::Lambda
     # [deployment package][1] and an [execution role][2]. The deployment
     # package is a .zip file archive or container image that contains your
     # function code. The execution role grants the function permission to
-    # use Amazon Web Services, such as Amazon CloudWatch Logs for log
-    # streaming and X-Ray for request tracing.
+    # use Amazon Web Servicesservices, such as Amazon CloudWatch Logs for
+    # log streaming and X-Ray for request tracing.
     #
     # If the deployment package is a [container image][3], then you set the
     # package type to `Image`. For a container image, the code property must
@@ -1216,17 +1234,17 @@ module Aws::Lambda
     # configuration includes set of signing profiles, which define the
     # trusted publishers for this function.
     #
-    # If another Amazon Web Services account or an Amazon Web Service
-    # invokes your function, use AddPermission to grant permission by
-    # creating a resource-based Identity and Access Management (IAM) policy.
-    # You can grant permissions at the function level, on a version, or on
-    # an alias.
+    # If another Amazon Web Services account or an Amazon Web
+    # Servicesservice invokes your function, use AddPermission to grant
+    # permission by creating a resource-based Identity and Access Management
+    # (IAM) policy. You can grant permissions at the function level, on a
+    # version, or on an alias.
     #
     # To invoke your function directly, use Invoke. To invoke your function
-    # in response to events in other Amazon Web Services, create an event
-    # source mapping (CreateEventSourceMapping), or configure a function
-    # trigger in the other service. For more information, see [Invoking
-    # Lambda functions][6].
+    # in response to events in other Amazon Web Servicesservices, create an
+    # event source mapping (CreateEventSourceMapping), or configure a
+    # function trigger in the other service. For more information, see
+    # [Invoking Lambda functions][6].
     #
     #
     #
@@ -1823,6 +1841,8 @@ module Aws::Lambda
     #   * {Types::EventSourceMappingConfiguration#self_managed_kafka_event_source_config #self_managed_kafka_event_source_config} => Types::SelfManagedKafkaEventSourceConfig
     #   * {Types::EventSourceMappingConfiguration#scaling_config #scaling_config} => Types::ScalingConfig
     #   * {Types::EventSourceMappingConfiguration#document_db_event_source_config #document_db_event_source_config} => Types::DocumentDBEventSourceConfig
+    #   * {Types::EventSourceMappingConfiguration#kms_key_arn #kms_key_arn} => String
+    #   * {Types::EventSourceMappingConfiguration#filter_criteria_error #filter_criteria_error} => Types::FilterCriteriaError
     #
     # @example Request syntax with placeholder values
     #
@@ -1870,6 +1890,9 @@ module Aws::Lambda
     #   resp.document_db_event_source_config.database_name #=> String
     #   resp.document_db_event_source_config.collection_name #=> String
     #   resp.document_db_event_source_config.full_document #=> String, one of "UpdateLookup", "Default"
+    #   resp.kms_key_arn #=> String
+    #   resp.filter_criteria_error.error_code #=> String
+    #   resp.filter_criteria_error.message #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/DeleteEventSourceMapping AWS API Documentation
     #
@@ -1886,9 +1909,9 @@ module Aws::Lambda
     # for DeleteAlias.
     #
     # To delete Lambda event source mappings that invoke a function, use
-    # DeleteEventSourceMapping. For Amazon Web Services and resources that
-    # invoke your function directly, delete the trigger in the service where
-    # you originally configured it.
+    # DeleteEventSourceMapping. For Amazon Web Servicesservices and
+    # resources that invoke your function directly, delete the trigger in
+    # the service where you originally configured it.
     #
     # @option params [required, String] :function_name
     #   The name or ARN of the Lambda function or version.
@@ -2310,6 +2333,8 @@ module Aws::Lambda
     #   * {Types::EventSourceMappingConfiguration#self_managed_kafka_event_source_config #self_managed_kafka_event_source_config} => Types::SelfManagedKafkaEventSourceConfig
     #   * {Types::EventSourceMappingConfiguration#scaling_config #scaling_config} => Types::ScalingConfig
     #   * {Types::EventSourceMappingConfiguration#document_db_event_source_config #document_db_event_source_config} => Types::DocumentDBEventSourceConfig
+    #   * {Types::EventSourceMappingConfiguration#kms_key_arn #kms_key_arn} => String
+    #   * {Types::EventSourceMappingConfiguration#filter_criteria_error #filter_criteria_error} => Types::FilterCriteriaError
     #
     # @example Request syntax with placeholder values
     #
@@ -2357,6 +2382,9 @@ module Aws::Lambda
     #   resp.document_db_event_source_config.database_name #=> String
     #   resp.document_db_event_source_config.collection_name #=> String
     #   resp.document_db_event_source_config.full_document #=> String, one of "UpdateLookup", "Default"
+    #   resp.kms_key_arn #=> String
+    #   resp.filter_criteria_error.error_code #=> String
+    #   resp.filter_criteria_error.message #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/GetEventSourceMapping AWS API Documentation
     #
@@ -3849,6 +3877,9 @@ module Aws::Lambda
     #   resp.event_source_mappings[0].document_db_event_source_config.database_name #=> String
     #   resp.event_source_mappings[0].document_db_event_source_config.collection_name #=> String
     #   resp.event_source_mappings[0].document_db_event_source_config.full_document #=> String, one of "UpdateLookup", "Default"
+    #   resp.event_source_mappings[0].kms_key_arn #=> String
+    #   resp.event_source_mappings[0].filter_criteria_error.error_code #=> String
+    #   resp.event_source_mappings[0].filter_criteria_error.message #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/ListEventSourceMappings AWS API Documentation
     #
@@ -5321,9 +5352,9 @@ module Aws::Lambda
       req.send_request(options)
     end
 
-    # Revokes function-use permission from an Amazon Web Service or another
-    # Amazon Web Services account. You can get the ID of the statement from
-    # the output of GetPolicy.
+    # Revokes function-use permission from an Amazon Web Servicesservice or
+    # another Amazon Web Services account. You can get the ID of the
+    # statement from the output of GetPolicy.
     #
     # @option params [required, String] :function_name
     #   The name or ARN of the Lambda function, version, or alias.
@@ -5773,6 +5804,16 @@ module Aws::Lambda
     # @option params [Types::DocumentDBEventSourceConfig] :document_db_event_source_config
     #   Specific configuration settings for a DocumentDB event source.
     #
+    # @option params [String] :kms_key_arn
+    #   The ARN of the Key Management Service (KMS) customer managed key that
+    #   Lambda uses to encrypt your function's [filter criteria][1]. By
+    #   default, Lambda does not encrypt your filter criteria object. Specify
+    #   this property to encrypt data using your own customer managed key.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics
+    #
     # @return [Types::EventSourceMappingConfiguration] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::EventSourceMappingConfiguration#uuid #uuid} => String
@@ -5802,6 +5843,8 @@ module Aws::Lambda
     #   * {Types::EventSourceMappingConfiguration#self_managed_kafka_event_source_config #self_managed_kafka_event_source_config} => Types::SelfManagedKafkaEventSourceConfig
     #   * {Types::EventSourceMappingConfiguration#scaling_config #scaling_config} => Types::ScalingConfig
     #   * {Types::EventSourceMappingConfiguration#document_db_event_source_config #document_db_event_source_config} => Types::DocumentDBEventSourceConfig
+    #   * {Types::EventSourceMappingConfiguration#kms_key_arn #kms_key_arn} => String
+    #   * {Types::EventSourceMappingConfiguration#filter_criteria_error #filter_criteria_error} => Types::FilterCriteriaError
     #
     # @example Request syntax with placeholder values
     #
@@ -5846,6 +5889,7 @@ module Aws::Lambda
     #       collection_name: "CollectionName",
     #       full_document: "UpdateLookup", # accepts UpdateLookup, Default
     #     },
+    #     kms_key_arn: "KMSKeyArn",
     #   })
     #
     # @example Response structure
@@ -5888,6 +5932,9 @@ module Aws::Lambda
     #   resp.document_db_event_source_config.database_name #=> String
     #   resp.document_db_event_source_config.collection_name #=> String
     #   resp.document_db_event_source_config.full_document #=> String, one of "UpdateLookup", "Default"
+    #   resp.kms_key_arn #=> String
+    #   resp.filter_criteria_error.error_code #=> String
+    #   resp.filter_criteria_error.message #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/UpdateEventSourceMapping AWS API Documentation
     #
@@ -6133,7 +6180,7 @@ module Aws::Lambda
     #
     # To configure function concurrency, use PutFunctionConcurrency. To
     # grant invoke permissions to an Amazon Web Services account or Amazon
-    # Web Service, use AddPermission.
+    # Web Servicesservice, use AddPermission.
     #
     #
     #
@@ -6685,7 +6732,7 @@ module Aws::Lambda
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-lambda'
-      context[:gem_version] = '1.126.0'
+      context[:gem_version] = '1.127.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-lambda/client_api.rb

@@ -109,6 +109,9 @@ module Aws::Lambda
     FileSystemConfigList = Shapes::ListShape.new(name: 'FileSystemConfigList')
     Filter = Shapes::StructureShape.new(name: 'Filter')
     FilterCriteria = Shapes::StructureShape.new(name: 'FilterCriteria')
+    FilterCriteriaError = Shapes::StructureShape.new(name: 'FilterCriteriaError')
+    FilterCriteriaErrorCode = Shapes::StringShape.new(name: 'FilterCriteriaErrorCode')
+    FilterCriteriaErrorMessage = Shapes::StringShape.new(name: 'FilterCriteriaErrorMessage')
     FilterList = Shapes::ListShape.new(name: 'FilterList')
     FullDocument = Shapes::StringShape.new(name: 'FullDocument')
     FunctionArn = Shapes::StringShape.new(name: 'FunctionArn')
@@ -521,6 +524,7 @@ module Aws::Lambda
     CreateEventSourceMappingRequest.add_member(:self_managed_kafka_event_source_config, Shapes::ShapeRef.new(shape: SelfManagedKafkaEventSourceConfig, location_name: "SelfManagedKafkaEventSourceConfig"))
     CreateEventSourceMappingRequest.add_member(:scaling_config, Shapes::ShapeRef.new(shape: ScalingConfig, location_name: "ScalingConfig"))
     CreateEventSourceMappingRequest.add_member(:document_db_event_source_config, Shapes::ShapeRef.new(shape: DocumentDBEventSourceConfig, location_name: "DocumentDBEventSourceConfig"))
+    CreateEventSourceMappingRequest.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KMSKeyArn, location_name: "KMSKeyArn"))
     CreateEventSourceMappingRequest.struct_class = Types::CreateEventSourceMappingRequest
 
     CreateFunctionRequest.add_member(:function_name, Shapes::ShapeRef.new(shape: FunctionName, required: true, location_name: "FunctionName"))
@@ -696,6 +700,8 @@ module Aws::Lambda
     EventSourceMappingConfiguration.add_member(:self_managed_kafka_event_source_config, Shapes::ShapeRef.new(shape: SelfManagedKafkaEventSourceConfig, location_name: "SelfManagedKafkaEventSourceConfig"))
     EventSourceMappingConfiguration.add_member(:scaling_config, Shapes::ShapeRef.new(shape: ScalingConfig, location_name: "ScalingConfig"))
     EventSourceMappingConfiguration.add_member(:document_db_event_source_config, Shapes::ShapeRef.new(shape: DocumentDBEventSourceConfig, location_name: "DocumentDBEventSourceConfig"))
+    EventSourceMappingConfiguration.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KMSKeyArn, location_name: "KMSKeyArn"))
+    EventSourceMappingConfiguration.add_member(:filter_criteria_error, Shapes::ShapeRef.new(shape: FilterCriteriaError, location_name: "FilterCriteriaError"))
     EventSourceMappingConfiguration.struct_class = Types::EventSourceMappingConfiguration
 
     EventSourceMappingsList.member = Shapes::ShapeRef.new(shape: EventSourceMappingConfiguration)
@@ -712,6 +718,10 @@ module Aws::Lambda
     FilterCriteria.add_member(:filters, Shapes::ShapeRef.new(shape: FilterList, location_name: "Filters"))
     FilterCriteria.struct_class = Types::FilterCriteria
 
+    FilterCriteriaError.add_member(:error_code, Shapes::ShapeRef.new(shape: FilterCriteriaErrorCode, location_name: "ErrorCode"))
+    FilterCriteriaError.add_member(:message, Shapes::ShapeRef.new(shape: FilterCriteriaErrorMessage, location_name: "Message"))
+    FilterCriteriaError.struct_class = Types::FilterCriteriaError
+
     FilterList.member = Shapes::ShapeRef.new(shape: Filter)
 
     FunctionArnList.member = Shapes::ShapeRef.new(shape: FunctionArn)
@@ -1453,6 +1463,7 @@ module Aws::Lambda
     UpdateEventSourceMappingRequest.add_member(:function_response_types, Shapes::ShapeRef.new(shape: FunctionResponseTypeList, location_name: "FunctionResponseTypes"))
     UpdateEventSourceMappingRequest.add_member(:scaling_config, Shapes::ShapeRef.new(shape: ScalingConfig, location_name: "ScalingConfig"))
     UpdateEventSourceMappingRequest.add_member(:document_db_event_source_config, Shapes::ShapeRef.new(shape: DocumentDBEventSourceConfig, location_name: "DocumentDBEventSourceConfig"))
+    UpdateEventSourceMappingRequest.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KMSKeyArn, location_name: "KMSKeyArn"))
     UpdateEventSourceMappingRequest.struct_class = Types::UpdateEventSourceMappingRequest
 
     UpdateFunctionCodeRequest.add_member(:function_name, Shapes::ShapeRef.new(shape: FunctionName, required: true, location: "uri", location_name: "FunctionName"))

data/lib/aws-sdk-lambda/types.rb

@@ -167,27 +167,27 @@ module Aws::Lambda
     #   @return [String]
     #
     # @!attribute [rw] principal
-    #   The Amazon Web Service or Amazon Web Services account that invokes
-    #   the function. If you specify a service, use `SourceArn` or
+    #   The Amazon Web Servicesservice or Amazon Web Services account that
+    #   invokes the function. If you specify a service, use `SourceArn` or
     #   `SourceAccount` to limit who can invoke the function through that
     #   service.
     #   @return [String]
     #
     # @!attribute [rw] source_arn
-    #   For Amazon Web Services, the ARN of the Amazon Web Services resource
-    #   that invokes the function. For example, an Amazon S3 bucket or
-    #   Amazon SNS topic.
+    #   For Amazon Web Servicesservices, the ARN of the Amazon Web Services
+    #   resource that invokes the function. For example, an Amazon S3 bucket
+    #   or Amazon SNS topic.
     #
     #   Note that Lambda configures the comparison using the `StringLike`
     #   operator.
     #   @return [String]
     #
     # @!attribute [rw] source_account
-    #   For Amazon Web Service, the ID of the Amazon Web Services account
-    #   that owns the resource. Use this together with `SourceArn` to ensure
-    #   that the specified account owns the resource. It is possible for an
-    #   Amazon S3 bucket to be deleted by its owner and recreated by another
-    #   account.
+    #   For Amazon Web Servicesservice, the ID of the Amazon Web Services
+    #   account that owns the resource. Use this together with `SourceArn`
+    #   to ensure that the specified account owns the resource. It is
+    #   possible for an Amazon S3 bucket to be deleted by its owner and
+    #   recreated by another account.
     #   @return [String]
     #
     # @!attribute [rw] event_source_token
@@ -842,6 +842,18 @@ module Aws::Lambda
     #   Specific configuration settings for a DocumentDB event source.
     #   @return [Types::DocumentDBEventSourceConfig]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The ARN of the Key Management Service (KMS) customer managed key
+    #   that Lambda uses to encrypt your function's [filter criteria][1].
+    #   By default, Lambda does not encrypt your filter criteria object.
+    #   Specify this property to encrypt data using your own customer
+    #   managed key.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/CreateEventSourceMappingRequest AWS API Documentation
     #
     class CreateEventSourceMappingRequest < Struct.new(
@@ -867,7 +879,8 @@ module Aws::Lambda
       :amazon_managed_kafka_event_source_config,
       :self_managed_kafka_event_source_config,
       :scaling_config,
-      :document_db_event_source_config)
+      :document_db_event_source_config,
+      :kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1870,6 +1883,12 @@ module Aws::Lambda
     #   Lambda should process an event. For more information, see [Lambda
     #   event filtering][1].
     #
+    #   If filter criteria is encrypted, this field shows up as `null` in
+    #   the response of ListEventSourceMapping API calls. You can view this
+    #   field in plaintext in the response of GetEventSourceMapping and
+    #   DeleteEventSourceMapping calls if you have `kms:Decrypt` permissions
+    #   for the correct KMS key.
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html
@@ -1984,6 +2003,20 @@ module Aws::Lambda
     #   Specific configuration settings for a DocumentDB event source.
     #   @return [Types::DocumentDBEventSourceConfig]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The ARN of the Key Management Service (KMS) customer managed key
+    #   that Lambda uses to encrypt your function's [filter criteria][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics
+    #   @return [String]
+    #
+    # @!attribute [rw] filter_criteria_error
+    #   An object that contains details about an error related to filter
+    #   criteria encryption.
+    #   @return [Types::FilterCriteriaError]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/EventSourceMappingConfiguration AWS API Documentation
     #
     class EventSourceMappingConfiguration < Struct.new(
@@ -2013,7 +2046,9 @@ module Aws::Lambda
       :amazon_managed_kafka_event_source_config,
       :self_managed_kafka_event_source_config,
       :scaling_config,
-      :document_db_event_source_config)
+      :document_db_event_source_config,
+      :kms_key_arn,
+      :filter_criteria_error)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2078,6 +2113,27 @@ module Aws::Lambda
       include Aws::Structure
     end
 
+    # An object that contains details about an error related to filter
+    # criteria encryption.
+    #
+    # @!attribute [rw] error_code
+    #   The KMS exception that resulted from filter criteria encryption or
+    #   decryption.
+    #   @return [String]
+    #
+    # @!attribute [rw] message
+    #   The error message.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/FilterCriteriaError AWS API Documentation
+    #
+    class FilterCriteriaError < Struct.new(
+      :error_code,
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The code for the Lambda function. You can either specify an object in
     # Amazon S3, upload a .zip file archive deployment package directly, or
     # specify the URI of a container image.
@@ -6322,6 +6378,18 @@ module Aws::Lambda
     #   Specific configuration settings for a DocumentDB event source.
     #   @return [Types::DocumentDBEventSourceConfig]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The ARN of the Key Management Service (KMS) customer managed key
+    #   that Lambda uses to encrypt your function's [filter criteria][1].
+    #   By default, Lambda does not encrypt your filter criteria object.
+    #   Specify this property to encrypt data using your own customer
+    #   managed key.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/UpdateEventSourceMappingRequest AWS API Documentation
     #
     class UpdateEventSourceMappingRequest < Struct.new(
@@ -6340,7 +6408,8 @@ module Aws::Lambda
       :tumbling_window_in_seconds,
       :function_response_types,
       :scaling_config,
-      :document_db_event_source_config)
+      :document_db_event_source_config,
+      :kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-lambda.rb

@@ -54,6 +54,6 @@ require_relative 'aws-sdk-lambda/event_streams'
 # @!group service
 module Aws::Lambda
 
-  GEM_VERSION = '1.126.0'
+  GEM_VERSION = '1.127.0'
 
 end

data/sig/client.rbs

@@ -179,6 +179,8 @@ module Aws
         def self_managed_kafka_event_source_config: () -> Types::SelfManagedKafkaEventSourceConfig
         def scaling_config: () -> Types::ScalingConfig
         def document_db_event_source_config: () -> Types::DocumentDBEventSourceConfig
+        def kms_key_arn: () -> ::String
+        def filter_criteria_error: () -> Types::FilterCriteriaError
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Lambda/Client.html#create_event_source_mapping-instance_method
       def create_event_source_mapping: (
@@ -234,7 +236,8 @@ module Aws
                                            database_name: ::String?,
                                            collection_name: ::String?,
                                            full_document: ("UpdateLookup" | "Default")?
-                                         }
+                                         },
+                                         ?kms_key_arn: ::String
                                        ) -> _CreateEventSourceMappingResponseSuccess
                                      | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateEventSourceMappingResponseSuccess
 
@@ -411,6 +414,8 @@ module Aws
         def self_managed_kafka_event_source_config: () -> Types::SelfManagedKafkaEventSourceConfig
         def scaling_config: () -> Types::ScalingConfig
         def document_db_event_source_config: () -> Types::DocumentDBEventSourceConfig
+        def kms_key_arn: () -> ::String
+        def filter_criteria_error: () -> Types::FilterCriteriaError
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Lambda/Client.html#delete_event_source_mapping-instance_method
       def delete_event_source_mapping: (
@@ -530,6 +535,8 @@ module Aws
         def self_managed_kafka_event_source_config: () -> Types::SelfManagedKafkaEventSourceConfig
         def scaling_config: () -> Types::ScalingConfig
         def document_db_event_source_config: () -> Types::DocumentDBEventSourceConfig
+        def kms_key_arn: () -> ::String
+        def filter_criteria_error: () -> Types::FilterCriteriaError
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Lambda/Client.html#get_event_source_mapping-instance_method
       def get_event_source_mapping: (
@@ -1223,6 +1230,8 @@ module Aws
         def self_managed_kafka_event_source_config: () -> Types::SelfManagedKafkaEventSourceConfig
         def scaling_config: () -> Types::ScalingConfig
         def document_db_event_source_config: () -> Types::DocumentDBEventSourceConfig
+        def kms_key_arn: () -> ::String
+        def filter_criteria_error: () -> Types::FilterCriteriaError
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Lambda/Client.html#update_event_source_mapping-instance_method
       def update_event_source_mapping: (
@@ -1265,7 +1274,8 @@ module Aws
                                            database_name: ::String?,
                                            collection_name: ::String?,
                                            full_document: ("UpdateLookup" | "Default")?
-                                         }
+                                         },
+                                         ?kms_key_arn: ::String
                                        ) -> _UpdateEventSourceMappingResponseSuccess
                                      | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateEventSourceMappingResponseSuccess
 

data/sig/types.rbs

@@ -178,6 +178,7 @@ module Aws::Lambda
       attr_accessor self_managed_kafka_event_source_config: Types::SelfManagedKafkaEventSourceConfig
       attr_accessor scaling_config: Types::ScalingConfig
       attr_accessor document_db_event_source_config: Types::DocumentDBEventSourceConfig
+      attr_accessor kms_key_arn: ::String
       SENSITIVE: []
     end
 
@@ -404,6 +405,8 @@ module Aws::Lambda
       attr_accessor self_managed_kafka_event_source_config: Types::SelfManagedKafkaEventSourceConfig
       attr_accessor scaling_config: Types::ScalingConfig
       attr_accessor document_db_event_source_config: Types::DocumentDBEventSourceConfig
+      attr_accessor kms_key_arn: ::String
+      attr_accessor filter_criteria_error: Types::FilterCriteriaError
       SENSITIVE: []
     end
 
@@ -423,6 +426,12 @@ module Aws::Lambda
       SENSITIVE: []
     end
 
+    class FilterCriteriaError
+      attr_accessor error_code: ::String
+      attr_accessor message: ::String
+      SENSITIVE: []
+    end
+
     class FunctionCode
       attr_accessor zip_file: ::String
       attr_accessor s3_bucket: ::String
@@ -1379,6 +1388,7 @@ module Aws::Lambda
       attr_accessor function_response_types: ::Array[("ReportBatchItemFailures")]
       attr_accessor scaling_config: Types::ScalingConfig
       attr_accessor document_db_event_source_config: Types::DocumentDBEventSourceConfig
+      attr_accessor kms_key_arn: ::String
       SENSITIVE: []
     end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-lambda
 version: !ruby/object:Gem::Version
-  version: 1.126.0
+  version: 1.127.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-08-19 00:00:00.000000000 Z
+date: 2024-08-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core